Last updated: 24 March 2026
1. Who We Are
Game and Flames Ltd is a live-fire catering company based in Bexhill-on-Sea, East Sussex, UK.
Data Controller: Game and Flames Ltd
Contact: info@gameandflames.com | +44 (0) 7428 179 125
2. What Data We Collect
We may collect the following personal data when you interact with our website or services:
- Identity data: Full name
- Contact data: Email address, phone number
- Event data: Event type, date, guest count, venue details, dietary requirements
- Payment data: Processed securely by Stripe; we do not store card details
- Technical data: IP address, browser type, pages visited (via cookies, with consent)
- Communication data: Messages you send us through forms, email, or phone
3. How We Use Your Data
We process your personal data for the following purposes under UK GDPR:
- Contract performance (Art. 6(1)(b)): To provide quotes, manage bookings, process payments, and deliver our catering services
- Legitimate interests (Art. 6(1)(f)): To respond to enquiries, improve our website and services, and manage our client relationships
- Consent (Art. 6(1)(a)): For marketing communications and non-essential cookies (you can withdraw consent at any time)
- Legal obligation (Art. 6(1)(c)): To comply with tax, accounting, and food safety regulations
4. How We Store and Protect Your Data
- Data is stored on Cloudflare infrastructure with encryption at rest and in transit
- Payment processing is handled by Stripe (PCI DSS Level 1 certified)
- We retain enquiry data for up to 24 months after your last interaction, or as long as needed to fulfil our legal obligations
- You can request deletion at any time (see Section 7)
5. Cookies
Our website uses cookies to improve your experience:
- Essential cookies: Required for the website to function (no consent needed)
- Analytics cookies: Google Analytics (GA4) to understand how visitors use our site (requires consent)
You can manage cookie preferences via the cookie banner displayed on your first visit, or by adjusting your browser settings.
6. Third-Party Sharing
We do not sell your personal data. We may share data with:
- Stripe: For payment processing
- Google Analytics: For website analytics (anonymised where possible)
- Cloudflare: For website hosting and security
- HMRC: As required by UK tax law
7. Your Rights Under UK GDPR
You have the right to:
- Access: Request a copy of the personal data we hold about you
- Rectification: Ask us to correct inaccurate or incomplete data
- Erasure: Request deletion of your personal data (“right to be forgotten”)
- Restriction: Ask us to restrict processing in certain circumstances
- Portability: Request your data in a structured, machine-readable format
- Object: Object to processing based on legitimate interests or for direct marketing
- Withdraw consent: Where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, contact us at info@gameandflames.com. We will respond within 30 days.
8. Complaints
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
ico.org.uk/make-a-complaint | Tel: 0303 123 1113
9. Changes to This Policy
We may update this policy from time to time. The latest version will always be available at this page. Material changes will be communicated via email where possible.